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Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
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Attachment(s) 

1) □ Notice of References Cited (PTO-892) 

2) □ Notice of Drafts person's Patent Drawing Review (PTO-948) 

3) □ Information Disclosure Statement(s) (PTO-1449 or PTO/SB/08) 

Paper No(s)/Mail Date . 



4) Q Interview Summary (PTO-413) 

Paper No(s)/Mail Date. . 

5) CI Notice of Informal Patent Application (PTO-152) 

6) □ Other: . 



_U.S._Patentand-Trademark.Office 
PTOL-326 (Rev. 1-04) 



Office Action Summary 



Part of Paper No./Mail"Date 20040817 



Application/Control Number: 09/596,652 Page 2 

Art Unit: 2132 

DETAILED ACTION 



Response to Arguments 

1 . Applicant's amendment of the independent claims 1,13 and 20, reflects the 
limitation "server off-loads a computation burden associated with the cryptographic 
service from the client". Applicant argues that McGravey does not teach off-loading of a 
cryptographic service from a client to a server. Examiner respectfully disagrees and 
points out, that McGravey teaches that the server tunnels all the client information on to 
the private key system as shown in Fig.3. Therefore, the server off-loads the 
cryptographic service from the client 300. 

2. Applicant states that examiner may have confused the difference between a 
cryptographic service and the cryptographic operations. Examiner points out that he is 
applying a broad but reasonable interpretation of the claims. In light of that a 
cryptographic service is equated with the encryption of the data received from the client 
at the server as taught in McGravey. Examiner respectfully maintains his position that 
McGravey does teach a "cryptographic service". 

3. Applicant further argues that nothing in McGravey teaches to one skilled in the art 
a suggestion to modify McGravey to include a network server that provides 
cryptographic services to a client. 

Examiner respectfully disagrees and points out that McGravey himself teaches 
providing cryptographic services at the server (see Fig.6). McGravey teaches that the 
session key(s) are sent 607 (in Fig. 6) from the private key system to the server to 



Application/Control Number: 09/596,652 Page 3 

Art Unit: 2132 

enable the server to decrypt data requests coming in from the client and to encrypt the 
resulting messages to the client (see column 10, lines 33-36), which meets the limitation 
"cryptographic services". 

Examiner also points out that while McGravey states that the server tunnels all the 
client information on to the private key system as shown at 602, McGarvey does not 
explicitly teach generating a tunnel on the network and utilizing the tunnel for sending 
information form the client to the server. Kirby discloses transferring encrypted packets 
over a public network (see abstract). Kirby teaches that the policy id field is used to 
create tunnels 140, 142 between firewall computers 146, 148 on internet 152 (see 
Fig. 8). When computer 146 receives a network packet, it checks the policy id to 
determine which "tunnel" the packet came through. The tunnel indicates the type of 
encryption algorithm used to encrypt the packet (see column 5, lines 36-42). 
Examiner maintains that one of ordinary skill in the art would have been motivated to 
receive information at the server from the client utilizing the tunnel as taught in Kirby for 
determining the type of encryption algorithm used to encrypt the packet (see Kirby 
column 5, lines 36-42). Therefore the combination of teachings of McGravey and Kirby 
renders the instant claims obvious. 

4. The rejections of remaining claims 1-3, 5-15 and 17-22 are maintained. 

Claim Rejections - 35 USC § 103 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 
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(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 1-3, 5-15 and 17-22 are rejected under 35 U.S.C. 103(a) as being unpatentable 

over McGravey (U.S. Patent No. 6.643.774 B1 ) in view of Kirby (U.S. Patent No. 

5.898.784). 

6. Referring to the instant claims, McGravey discloses a method for delegating 
authority in a public key authentication environment from a client to a server machine or 
process, in order that the server machine or process can then securely access 
resources and securely perform tasks on behalf of the client (see abstract). 
McGravey shows in Fig. 6 that the client sends an initial request at 601 , comprising a 
nonce (noncel) and a request for the server's certificate. The server forwards or tunnels 
all the client information received from the client during the handshaking process on to 
the private key system as shown at 602. The private key system now has the noncel 
(from the client), and the original request from the client. The private key system 
responds 603 by sending a signed noncel , a nonce2 T and the private key system's 
certificate (identified in FIG. 6 as the security certificate) to the server. The server then 
forwards 604 this information to the client. The client then responds 605 by sending a 
signed nonce2 and the client certificate to the server. The server forwards 606 or 
tunnels this information to the private key system. 

7. Referring to the independent claims 1,13 and 20, the limitation "identifying a client 
utilizing the network" is met by the client, which sends an initial request at 601 , 
comprising a nonce (noncel) and a request for the server's certificate (see Fig.6). 
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The limitation "receiving information at the server from the client ... wherein the 
information is encrypted by the client using the first key and performing cryptographic 
service at the server" is met by the private key system (i.e. client connected to the 
server) sending a signed noncel, a nonce2, and the private key system's certificate 
(identified in FIG. 6 as the security certificate) to the server. The limitation "server off- 
loads a computation burden associated with the cryptographic service from the client" is 
met by teaching of McGravey that the server tunnels all the client information on to the 
private key system as shown at 602, thereby off-loading the cryptographic service from 
the client. 

While McGravey states that the server tunnels all the client information on to the private 
key system as shown at 602, McGarvey does not explicitly teach generating a tunnel on 
the network and utilizing the tunnel for sending information form the client to the server. 

Referring to the instant claims, Kirby discloses transferring encrypted packets over a 
public network (see abstract). Kirby teaches that the policy id field is used to create 
tunnels 140, 142 between firewall computers 146, 148 on internet 152 (see Fig. 8). 
When computer 146 receives a network packet, it checks the policy id to determine 
which "tunnel" the packet came through. The tunnel indicates the type of encryption 
algorithm used to encrypt the packet (see column 5, lines 36-42). Therefore, at the time 
the invention was made, it would have been obvious to one of ordinary skill in the art to 
receive information at the server from the client of McGravey utilizing the tunnel as 
taught in Kirby. One of ordinary skill in the art would have been motivated to receive 
information at the server from the client utilizing the tunnel as taught in Kirby for 
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determining the type of encryption algorithm used to encrypt the packet (see column 5, 
lines 36-42). 

8. Referring to claims 3, 1 5 and 21 , McGravey teaches sending a signed noncel , a 
nonce2 (see Fig. 6), which meets the limitation "key comprises at least one parameter 
for the cryptographic service performed by the server". 

9. Referring to claims 5, it is well known in the art to perform modular exponentiation 
at the server. One of ordinary skill in the art would have been motivated to perform 
modular exponentiation at the server in order not to reveal the client secret to the 
server. 

10. Referring to claims 6 and 1 8, "transmitting the cryptographic service result to the 
client" is met by the server, which sends 610 the session credential and a request for 
the ticket(s) to the private key system (see Fig.6). 

1 1 . Referring to claim 22, it is well know in the art to have the message blinded by the 
user before transmittal to the server. One of ordinary skill in the art would have been 
motivated to have the message blinded prior to transmission for security in case of 
interception. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Grigory Gurshman whose telephone number is (703) 
306-2900. The examiner can normally be reached on 9 AM-5:30 PM. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on (703) 305-1830. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 



Grigory Gurshman 

Examiner 

Art Unit 2132 
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